Lead Workplace Technology Engineer (Microsoft)

Overview

Lead Workplace Technology Engineer (Microsoft) at PEXA UK. This role evolves and supports a modern digital workplace environment, managing predominantly Microsoft end-user services. It is a hands-on technical, lead-capable position intended to deliver the ongoing workplace technology strategy. You will engage with key stakeholders in the UK and Australia, so strong communication and gravitas are essential. You will be able to self-manage, plan projects, delegate tasks, and work as part of a team. You will ensure secure, reliable, and streamlined access to tools and services that empower productivity, collaboration, and compliance across the UK business. The role may evolve to own aspects of the IT support service. In-office collaboration days are 20–25 days per year.

Location note: predominantly home-based with occasional in-office collaboration.

Key Responsibilities

• Technical Leadership & Design: Contribute to the technical strategy and roadmap for workplace technologies in the UK, aligned with PEXA Group’s global standards and goals. Take primary responsibility for execution and delivery of the strategy, balancing everyday business needs with project delivery.
• Architecture & Solutions: Design and maintain secure, scalable solutions using Microsoft AD, Entra ID (Azure AD), Microsoft 365, Intune, MAM, Windows Autopilot, Windows 11, and AVD. Ensure seamless integration between the Microsoft stack and third-party services (Okta, Zoom, Miro, Clearskye, Jira).
• Device Lifecycle & Procurement: Work with the IT Support Provider to define the lifecycle of corporate devices from procurement to provisioning, management, support, and secure disposal. Recommend hardware, software, and licenses aligned to security, compliance, and business needs. Undertake technical due diligence and supplier onboarding for new requests.
• Identity & Security: Manage Entra ID and legacy AD policies, structures, and access controls. Maintain governance including conditional access policies, identity lifecycle management, MFA, and device compliance.
• Operations & Support: Collaborate with IT support ownership to align incident resolution, device lifecycle management, and service experience. Provide leadership and technical guidance on workplace-related support issues, with potential to assume line management or service ownership as the organization grows. Act as senior escalation point for complex end-user, endpoint, and collaboration platform issues. Monitor and optimise performance, security posture, and cost efficiency across the workplace ecosystem. Maintain relationships with suppliers and vendors to drive value and cost optimisation. Manage day-to-day operations of corporate virtual desktops, including AVD environments. Ensure compliance with patching, security updates, and Cyber Essentials Plus audits. Support all collaboration and M365 tools (Exchange Online, OneDrive, SharePoint, Teams) and emerging services like Copilot.
• Collaboration & Governance: Work with international peers to align technology patterns, contribute to global standards, and adopt shared services where appropriate. Develop documentation, SOPs, and runbooks for UK workplace systems. Ensure governance of access, identity, and device compliance.
• Innovation & Improvement: Drive adoption of modern management techniques and self-service IT models. Evaluate and trial emerging technologies and features within M365, AVD, and unified communications to improve user experience and automation. Lead workplace improvement projects including onboarding automation, collaboration tooling integration, and hybrid meeting experience optimization.
• Key Technologies & Tools: Microsoft Entra ID (Azure AD), Intune, Autopilot, Windows 11, AVD, M365 (Exchange, SharePoint, OneDrive, Teams); Legacy: On-prem Active Directory, Group Policy, Hybrid Identity; Third-Party: Okta, Clearskye (IGA), ServiceNow, Jira, Miro, Zoom; Endpoint Security & Compliance: Palo Alto Global Protect VPN, Cortex XDR, Airlock, BitLocker, Conditional Access, PIM. Office tech includes door access, CCTV, AV meeting room equipment, printers, desk tech. Remote working equipment such as screens, docks, headsets, ergonomic chairs/desks.

Skills & Experience

• Essential Skills & Experience: Proven experience designing, deploying, and supporting Microsoft 365 and Intune-managed environments at scale; strong hands-on experience with Windows Autopilot, Entra ID, Conditional Access, and AVD; experience managing hybrid environments with legacy AD and Entra ID integration; excellent troubleshooting across end-user devices, collaboration platforms, and identity services; experience integrating or managing 3rd party workplace tech platforms (Okta, Zoom, Jira); strong documentation skills and ability to translate technical complexity into operational standards.
• Desirable: Exposure to automation (PowerShell, Logic Apps, Graph API); experience with identity governance (Clearskye, OKTA, Entra); prior involvement in workplace transformation or device modernization projects.

Legal & Privacy

To be conducted as part of post-offer employment checks: the personal information collected may be shared with Cifas to prevent fraud and other improper conduct. Your information will also be used to verify identity. See privacy notice for details and data processing rights. For recruitment data processing under UK GDPR, see our applicant policy.

Note: The information above is based on the job description and may reflect UK operations of PEXA.

Location: Milton Keynes, High Wycombe, Maidenhead, Reading, United Kingdom.